CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2019-16212

CVE-2019-16212 affects Brocade SANnav prior to v2.1.0. The issue allows a remote authenticated attacker to perform an LDAP injection and bypass authentication. Remediation is to upgrade SANnav to version 2.1.0 or higher (as documented by Broadcom/Brocade advisories and Lenovo security notes). If ...

CVE-2018-6447

The CVE-2018-6447 issue is a Reflective XSS in Brocade Fabric OS to the HTTP Management Interface. Affected: Brocade Fabric OS versions before 9.0.0, and prior lines 8.2.2c, 8.2.1e, 8.1.2k, 8.2.0_CBN3, 7.4.2g. Root cause: XSS vulnerability that could allow an authenticated user with web UI access...

CVE-2018-6447

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account...

PT-2020-14400

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 8.2.1 through 8.2.1d Brocade Fabric OS versions 8.2.2 before 8.2.2c Description The issue concerns multiple buffer overflow vulnerabilities in the REST API of Brocade Fabric OS. These vulnerabilities could allow remo...

PT-2020-8940

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.0.0 Description The issue allows a remote attacker to inject arbitrary HTTP headers in the http management interface, potentially leading to exploitation. Recommendations For Brocade Fabric OS versions pri...

CVE-2020-15372: Improper Control of Dynamically-Managed Code Resources

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging...

CVE-2020-15371: Improper Control of Generation of Code

Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, contains code injection and privilege escalation vulnerability...

PT-2020-14401

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 8.2.1 through 8.2.1d Brocade Fabric OS versions 8.2.2 before 8.2.2c Description The Rest API in Brocade Fabric OS is vulnerable to multiple instances of reflected input. Recommendations For Brocade Fabric OS versions...

PT-2020-14397

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2g Description The issue allows an authenticated, remote attacker to view a user password in cleartext due to incorrectly logging the user password in log files. Recommendations For Brocade Fabric OS...

PT-2020-8939

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.0.0 Description A vulnerability in the management interface could allow a remote attacker to perform a denial of service attack on the vulnerable host. Recommendations For Brocade Fabric OS versions prior ...

PT-2020-9799

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.0 Description A remote authenticated attacker could conduct an LDAP injection, potentially allowing them to bypass the authentication process. Recommendations For versions prior to 2.1.0, update to version...

PT-2020-9798

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.0 Description The issue concerns the storage of passwords in plaintext, which could potentially expose sensitive information. Recommendations For Brocade SANnav versions prior to 2.1.0, update to version...

PT-2020-14399

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2g Brocade Fabric OS versions prior to 8.1.2k Brocade Fabric OS versions prior to 8.2.0 CBN3 Brocade Fabric OS versions prior to 8.2.1e Brocade Fabric OS versions prior to 8.2.2a1 Brocade Fabric OS...

CVE-2020-15374: Undefined Security Weakness

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

CVE-2019-16211: Insufficiently Protected Credentials

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

CVE-2018-6449: Improper Neutralization of Input During Web Page Generation

Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTTP headers...

CVE-2020-15373: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

CVE-2020-15370: Insertion of Sensitive Information into Log File

Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user password in cleartext. The vulnerability is due to incorrectly logging the user password in log files...

CVE-2018-6447: Improper Neutralization of Input During Web Page Generation

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account...